kernel: net: cdc_eem: fix tx fixup skb leak

In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if skbcopyexpand failed, it return NULL, usbnetstartxmit will have no chance to free original skb. fix it by free orginal skb in eemtxfixu...

CVE-2021-47236

In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if skbcopyexpand failed, it return NULL, usbnetstartxmit will have no chance to free original skb. fix it by free orginal skb in eemtxfixu...

UBUNTU-CVE-2021-47236

In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if skbcopyexpand failed, it return NULL, usbnetstartxmit will have no chance to free original skb. fix it by free orginal skb in eemtxfixu...

CVE-2021-47236 net: cdc_eem: fix tx fixup skb leak

In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if skbcopyexpand failed, it return NULL, usbnetstartxmit will have no chance to free original skb. fix it by free orginal skb in eemtxfixu...

PT-2021-29536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.12.12 Description A potential security issue exists due to a tx fixup skb leak in the cdc eem module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29455

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.10.45 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the cdc eem module. The problem is described as a tx fixup skb leak. The actual impact and...

PT-2021-25396

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.30 through 5.4.127 Description: A potential security issue exists due to a tx fixup skb leak in the cdc eem module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-29390

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.4.127 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the cdc eem module. The problem is described as a tx fixup skb leak. The actual impact and...

PT-2021-25461

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.30 through 5.10.45 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the cdc eem module. The problem is described as a tx fixup skb leak. The actual impact a...

PT-2021-25542

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.30 through 5.12.12 Description: A potential security issue exists due to a tx fixup skb leak in the cdc eem module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

SAP Solution Manager 7.2 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Solution Manager remote unauthorized OS commands execution', 'License' = MSFLICENSE, 'Author' = 'Yvan Genuer', @1ggy The researcher who...

CVE-2020-36283

HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver Ethernet Emulation Mode. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker...

Cross site scripting

HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver Ethernet Emulation Mode. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker...

CVE-2020-36283

HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver Ethernet Emulation Mode. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker...

CVE-2020-36283

The CVE-2020-36283 issue affects HID OMNIKEY 5427 and OMNIKEY 5127 readers. A CSRF flaw in the Ethernet Emulation Mode (EEM) driver allows an authenticated user, lured to a malicious site, to send a crafted HTTP request that uploads a configuration file to the device. This can enable cross-site s...

CVE-2020-36283: Cross-Site Request Forgery (CSRF)

HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver Ethernet Emulation Mode. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker...

PT-2020-5839

Name of the Vulnerable Software and Affected Versions: HID OMNIKEY 5427 and HID OMNIKEY 5127 readers affected versions not specified Description: The issue is related to insufficient authentication of executed requests in the EEM driver of the HID OMNIKEY 5427 and HID OMNIKEY 5127 smart card read...

SAP Solution Manager remote unauthorized OS commands execution

This module exploits the CVE-2020-6207 vulnerability within the SAP EEM servlet tcsmdagentapplicationeem of SAP Solution Manager SolMan running version 7.2. The vulnerability occurs due to missing authentication checks when submitting a SOAP request to the /EemAdminService/EemAdmin page to get...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...